Re: Vlans

[Tim Salus <tsalus () CBOSS COM>]

I read the information at deja.com and other sources. The problem with
all of this is you have to be on the same segment as the switched device
" i.e.: firewall outside interface" When the packets come through the
router the mac address on the packet is the routers. Therefore if the
outside address is connected to a COLO's switch such as Exodus and the
interface on your router going to the firewall is connected to your
switch and the firewall outside interface is on the same vlan as the
routers interface then the only mac the switch will se is the routers.
With this in mind how can you do a mac flood on the switch?

I did much research on this and I duplicated some attacks but I had to
be on segment and no router between me and the switch. The address for
the switch is in the 10 network range and connected to another router.


Knowing how routers work shows why this exploit will not work from the
Internet.

Cisco books do say what vlans where created for but common sense tells
you that you can only subvert functionality so far.

Therefore please explain to me and others how you can subvert the routes
and the switch to do a mac overflow.